This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json) Hash identifier: GlK+Lm/g3v/9Rw38YF7zJiHhsGSNLlabKeWoofj4t0o= Subject key identifier: CF:B2:AE:AB:2B:B7:30:C6:5D:C6:3E:DC:DD:21:41:F6:42:C0:EB:F6 Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B3DC784779AF7E058D27022FB27B85682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft Manifest number: 0E43 Signing time: Sat 20 Dec 2025 22:00:44 +0000 Manifest this update: Sat 20 Dec 2025 22:00:44 +0000 Manifest next update: Sun 21 Dec 2025 22:00:44 +0000 Files and hashes: 1: 1-ghy1_BSABsGI7akBKLZbOuS5vM.roa (hash: 5f9usyUF6Ob7YmYVFXsGfm7dIcSCmT5Qe4VX7r7TJaU=) 2: Ik19RRjyfHjJ96aag1tg9GHfyYs.roa (hash: OMp+kmye4OfcUJMJC7fA4xejXa2bwcRzzIV7LNwQJIA=) 3: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: T7EC1d7edeHZRyz+3pJoZTWn28ATDAQr4xr0mnfY8x4=) 4: ewyBIvuudgP0tUenVwQ9pf-UuFw.roa (hash: rOH4lK3Tu41q/aakYU3ilg+rGKNxkPxnYW0KziN38LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:84:77:9a:f7:e0:58:d2:70:22:fb:27:b8:56:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 20 22:00:44 2025 GMT Not After : Dec 21 22:00:44 2025 GMT Subject: CN=cfb2aeab2bb730c65dc63edcdd2141f642c0ebf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:de:7c:f1:dd:29:3f:c2:5b:7b:b9:7c:2d: ed:89:52:8e:0b:d6:d8:04:9b:43:53:05:89:cd:52: 1d:93:f5:2f:d6:39:99:d8:fb:ba:ae:f7:47:7b:78: 16:f4:d1:cf:b4:1f:1c:13:c0:61:d5:e0:ec:59:46: 10:6a:4d:fe:3c:b7:06:88:3f:61:a1:c3:37:b2:ba: c3:63:69:6a:5a:95:27:17:ae:73:68:a6:4a:d4:0d: c3:9e:45:e0:77:be:f2:f4:e1:29:44:5a:9d:6c:0d: e4:64:4d:15:59:d1:89:fe:f3:56:e0:f2:92:eb:fc: b7:09:57:73:2a:e2:d5:87:65:d9:42:11:7f:87:fb: ab:e9:7a:64:2a:21:df:ed:6c:04:9a:e6:67:6c:89: 47:86:1c:63:92:1b:22:9d:2c:ef:30:c0:7b:7e:58: d7:9a:51:31:14:13:99:6c:06:fc:1b:9f:d1:3b:f7: 55:d9:d3:7a:7c:ec:44:d7:5e:e5:b9:2f:b5:3e:c8: bb:43:b3:06:1b:4a:99:b5:ff:b0:1e:6e:8f:97:a2: 3e:dd:20:2d:a5:3f:82:80:8a:f8:be:f9:72:32:5a: da:8d:03:09:5b:38:4b:1e:71:a6:5f:57:c4:0d:5e: 54:d7:61:eb:f8:a1:a3:d2:70:5d:1a:eb:67:a2:2d: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B2:AE:AB:2B:B7:30:C6:5D:C6:3E:DC:DD:21:41:F6:42:C0:EB:F6 X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:cc:49:1e:95:47:07:71:8a:b3:12:df:ff:00:8f:10:a2: 6b:ce:81:b7:ac:41:31:3a:7f:cc:fd:fc:74:58:63:eb:3f:92: 80:25:3c:b6:d9:5a:e4:32:e1:66:00:42:f1:b9:30:fd:3c:4f: 86:92:20:ae:23:cf:90:f1:10:ff:ff:e0:ad:71:bc:0f:81:14: 83:4f:7b:22:5a:20:eb:9b:d0:bd:20:02:9b:0d:cb:98:b8:55: 56:5b:5f:47:54:a6:0d:75:18:e3:85:e9:d4:46:08:95:05:4e: c8:7b:01:45:16:21:e5:94:20:46:9d:7d:9f:eb:ad:e2:53:9f: f5:bf:e5:3a:97:bc:d2:73:73:f5:65:fa:7c:d8:97:60:cd:59: 8d:50:3a:21:ef:b0:22:42:a1:e7:cb:3b:8a:9f:04:5c:be:76: 30:cf:bf:09:20:73:ab:56:64:ec:77:3e:9e:f1:b8:9d:68:19: 7d:90:f8:4e:a6:20:93:78:83:cc:e5:82:d1:7d:30:6d:63:93: a7:3c:38:08:7a:cb:2c:82:d3:aa:1b:21:aa:84:e1:f1:f2:da: 5d:72:f2:1a:40:db:37:bc:b2:23:66:ab:54:e5:04:ca:c3:64: 36:4b:5c:61:61:2e:0d:fe:6d:4e:74:a0:48:c3:cd:fa:3a:30: 65:9c:8d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4R3mvfgWNJwIvsnuFaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjIwMjIwMDQ0WhcNMjUxMjIxMjIwMDQ0WjAzMTEwLwYDVQQD EyhjZmIyYWVhYjJiYjczMGM2NWRjNjNlZGNkZDIxNDFmNjQyYzBlYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/efPHdKT/CW3u5fC3tiVKOC9bY BJtDUwWJzVIdk/Uv1jmZ2Pu6rvdHe3gW9NHPtB8cE8Bh1eDsWUYQak3+PLcGiD9h ocM3srrDY2lqWpUnF65zaKZK1A3DnkXgd77y9OEpRFqdbA3kZE0VWdGJ/vNW4PKS 6/y3CVdzKuLVh2XZQhF/h/ur6XpkKiHf7WwEmuZnbIlHhhxjkhsinSzvMMB7fljX mlExFBOZbAb8G5/RO/dV2dN6fOxE117luS+1Psi7Q7MGG0qZtf+wHm6Pl6I+3SAt pT+CgIr4vvlyMlrajQMJWzhLHnGmX1fEDV5U12Hr+KGj0nBdGutnoi0hCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+yrqsrtzDGXcY+3N0hQfZCwOv2MB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn7MSR6V RwdxirMS3/8AjxCia86Bt6xBMTp/zP38dFhj6z+SgCU8ttla5DLhZgBC8bkw/TxP hpIgriPPkPEQ///grXG8D4EUg097Ilog65vQvSACmw3LmLhVVltfR1SmDXUY44Xp 1EYIlQVOyHsBRRYh5ZQgRp19n+ut4lOf9b/lOpe80nNz9WX6fNiXYM1ZjVA6Ie+w IkKh58s7ip8EXL52MM+/CSBzq1Zk7Hc+nvG4nWgZfZD4TqYgk3iDzOWC0X0wbWOT pzw4CHrLLILTqhshqoTh8fLaXXLyGkDbN7yyI2arVOUEysNkNktcYWEuDf5tTnSg SMPN+jowZZyNqw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:37 2025 by rpki-client